Audits
Review assigned evidence as an auditor
Work from your engagement's Evidence Room and record review or clarification against the relevant item.
Before you start
Who this is for: Auditors assigned to an access-open engagement.
- Accept the invitation with the intended account.
- Your engagement assignment and framework scope must permit the material.
Follow these steps
Open the assigned engagement
Start in Auditor workspace and review Assigned engagements and Current scope. Open the intended engagement. If none are available, ask the engagement administrator to check your assignment and access window before attempting direct record links.
Read the evidence context
In Evidence Room, open the relevant evidence or evidence request. Inspect its exact version, source status, scope, and review context. Follow permitted detail links and compare the artifact with the requirement it is intended to support.
Record the review action
For an open item you have reviewed, use Mark reviewed. If information is unclear, enter a specific comment and choose Request clarification. Use Request supplemental when additional supporting material is needed. The latter requests require a comment so the organization can respond to a concrete question.
Follow the response
Return to the item's discussion and inspect submitted responses or additional material. Use available review actions according to the updated state. Evidence Room review status records audit work; it does not replace the organization's artifact approval, policy publication, or formal audit conclusion.
What you should see
The engagement item records your review or an actionable request, with discussion retained in its context.
If something doesn’t look right
A link returns unavailable
The record may be outside the assigned framework or engagement scope, or the access window may have changed. Ask the engagement administrator to verify it.
A request action is disabled
Add the required comment and check the item's current state and your review permission.
New evidence is missing from the room
Ask the organization team to inspect the scope and available Refresh from scope action. Do not infer that every workspace artifact belongs in the engagement.
Still need a little help?
Ask the assistant about these steps, or tell our team where you got stuck.
Contact support